san-28-s12.tlsprovisioning.exacttarget.com

- Salesforce.com, Inc. -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0a:a6:29:88:53:14:14:26:ef:a3:0d:b2:a6:31:30:c2 was issued on by DigiCert Inc.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Salesforce.com, Inc.

Organization: Salesforce.com, Inc.
State / Province: California
Locality: San Francisco
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0a:a6:29:88:53:14:14:26:ef:a3:0d:b2:a6:31:30:c2
Serial Number (int): 14155043615901321270948953491464335554
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 22:b8:84:85:c8:a3:5d:66:a9:97:24:1d:a0:a0:13:05:cc:44:72:78
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): f5:99:e8:e3:43:27:e5:1b:44:e9:13:3b:69:98:ee:a0:e7:f3:bc:98
Fingerprint (sha256): 04:a2:ec:cd:55:01:4c:4f:d1:7e:ba:54:63:50:98:f3:2c:db:9e:70:94:a1:9a:0c:fd:6f:cf:64:72:71:bc:e6

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate san-28-s12.tlsprovisioning.exacttarget.com

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-28-s12.tlsprovisioning.exacttarget.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

san-28-s12.tlsprovisioning.exacttarget.com
image.action.team-fca.com
image.admissions.ahduni.edu.in
image.best.agencyofincome.com
image.can.greenworkstools.com
image.cloud.uniminuto.edu
image.com.utk.edu
image.connect.senecazoo.org
image.contacto.clubsolaris.com
image.crm.infracommerce.com.br
image.divulga.sebrae-pe.net.br
image.e.brightcove.com
image.e.mufgamericas.com
image.e.nymg.hk
image.e.premiermartialarts.com
image.em.peoplesbanknet.com
image.email.anantara.com
image.email.avanihotels.com
image.email.bluepassport.com
image.email.collinsaerospace.com
image.email.convr.ai
image.email.eztec.com.br
image.email.ijm.org.au
image.email.kellerpostman.com
image.email.naladhu.com
image.email.nhcollection.com
image.email.nhhotels.com
image.email.nhowhotels.com
image.email.niyama.com
image.email.nswrl.com.au
image.email.oakshotels.com
image.email.ou.edu
image.email.resmed.co.in
image.email.starparks.com.br
image.email.steinerstudios.com
image.email.tivolihotels.com
image.email110grill.com
image.emailapexentertainment.com
image.emailevvivatrattoria.com
image.emailkrbrestaurant.com
image.emailwjflorida.com
image.f4.jibunbank.co.jp
image.financialwellness.pwc.com
image.hall.mileone.com
image.hg.mileone.com
image.income.permanentvictory.com
image.info.cidadesol.com.br
image.info.fandisentinel.com
image.info.telmac.com.br
image.information.unitingworld.org.au
image.intake.mtlawoffice.com
image.internal.mileone.com
image.join.asuprep.org
image.leooo.com.br
image.lovivimosjuntos.cusezar.com
image.mail.allspringglobal.com
image.mail.cajarealdelpotosi.coop
image.mail.centrecultureludes.ca
image.mail.inc-aus.com
image.mail.isaac.com.br
image.mail.jobomas.com
image.mail.lgonline.cl
image.mail09.bell.bank
image.mailers.happiesthealth.com
image.marketing.grupo-sm.com.mx
image.marketing.signatureglobal.in
image.marketingnaskadigital.com
image.messages.verisign.com
image.messages.wmich.edu
image.mission.uncommonschools.org
image.mkt.chicagobearsvip.com
image.mkt.dfwairport.com
image.mkt.hirogin.co.jp
image.mkt.manairadigital.com.br
image.motorworld.mileone.com
image.myfssmailusaf.com
image.news.tudoep.com
image.newsletters.happiesthealth.com
image.notificaciones.tuya.com.co
image.relacionamento.univali.br
image.remodelacionesusg.com
image.rockportkr.com
image.sales.brokermarketing.ca
image.sales.catalystfc.com
image.sf.talentsprint.com
image.solutions.canadapost-postescanada.ca
image.thombrowneclient.com
image.travel.redcoachusa.com
image.us.greenworkstools.com
image.uscommercial.greenworkstools.com

Other certificates including the domain name exacttarget.com

(limited to 100 certificates)
cust.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
san-12-s50.tlsprovisioning.exacttarget.com
akamai-san63.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
san-26-s12.tlsprovisioning.exacttarget.com
akamai-san234.exacttarget.com
akamai-san38.exacttarget.com
akamai-san123.exacttarget.com
akamai-san42.exacttarget.com
akamai-san50.exacttarget.com
akamai-san129.exacttarget.com
san-8-s13.tlsprovisioning.exacttarget.com
akamai-san152.exacttarget.com
akamai-san58.exacttarget.com
san-10-s51.tlsprovisioning.exacttarget.com
san-2-s13.tlsprovisioning.exacttarget.com
san-28-s12.tlsprovisioning.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
mc.eu.exacttarget.com
pages.virt.boa.exacttarget.com
san-30-s12.tlsprovisioning.exacttarget.com
globalops.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san10.exacttarget.com
view.s4.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
akamai-san37.exacttarget.com
akamai-san108.exacttarget.com
akamai-san100.exacttarget.com
san-1-s51.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
akamai-san153.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san20.exacttarget.com
artifactory-xt-p01.exacttarget.com
san-13-s10.tlsprovisioning.exacttarget.com
webservice.boa.exacttarget.com
akamai-san22.exacttarget.com
manage.s4.exacttarget.com
san-16-s12.tlsprovisioning.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-2-s4.tlsprovisioning.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
cust.exacttarget.com
akamai-san210.exacttarget.com
view.boa.exacttarget.com
san-11-s7.tlsprovisioning.exacttarget.com
app.s4.exacttarget.com
san-12-s51.tlsprovisioning.exacttarget.com
akamai-san19.exacttarget.com
san-5-s6.tlsprovisioning.exacttarget.com
san-15-s12.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
san-29-s12.tlsprovisioning.exacttarget.com
akamai-san121.exacttarget.com
san-4-s1.tlsprovisioning.exacttarget.com
members.boa.exacttarget.com
akamai-san174.exacttarget.com
san-21-s12.tlsprovisioning.exacttarget.com
akamai-san136.exacttarget.com
akamai-san172.exacttarget.com
san-10-s7.tlsprovisioning.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san17.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
origin-click.s4.exacttarget.com
san-10-s11.tlsprovisioning.exacttarget.com
akamai-san7.exacttarget.com
akamai-san69.exacttarget.com
akamai-san4.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
manage-api.s4qa1.lp.exacttarget.com
san-11-s11.tlsprovisioning.exacttarget.com
san-8-s51.tlsprovisioning.exacttarget.com
san-8-s11.tlsprovisioning.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
akamai-san198.exacttarget.com
restapi.s6.exacttarget.com
view.s51.exacttarget.com
san-13-s11.tlsprovisioning.exacttarget.com
akamai-san8.exacttarget.com
akamai-san15.exacttarget.com
akamai-san58.exacttarget.com
akamai-san4.exacttarget.com
pages.s50.exacttarget.com
akamai-san22.exacttarget.com
akamai-san247.exacttarget.com
inbox.exacttarget.com
akamai-san94.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-1-s1.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
san-10-s51.tlsprovisioning.exacttarget.com
san-38-s12.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
akamai-san194.exacttarget.com
san-3-s1.tlsprovisioning.exacttarget.com
san-6-s13.tlsprovisioning.exacttarget.com

Certificate

The complete raw certificate details for san-28-s12.tlsprovisioning.exacttarget.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsONOYscyKjETHMRBSpky
IQ8jGEAQn1IyKq7h4SxJKw7Yo3fECXJ6DWEIibXplPgCwwd0XsIMn812tIERM+W+
SgUK0JQ7huwYOWZ3MgtPmXzAc/YdFnuqhW2P69MWl/rF8ntf2V4wk6zK350q+cHi
5GoZsOD0psJE6wizC4PqhZFFd7asVKTGLL23kk2wK6kjYduhxparwHKoJSnKLuBg
JJFYRuccsG63vwOv3vHM67OlJW2czPlC2rqo8tA/ZeWnOVgKoF/x+GNYJ7jcS9A2
k/SxsCvDGrb0BBx3XYYjsWQnhylUq1felHAi47TPzMrNNGHNb3Xdp+UdcKW/NPrm
HQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14155043615901321270948953491464335554
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salesforce.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-28-s12.tlsprovisioning.exacttarget.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22330030536258922810527503361839933375282579877067872442666864407883348605598346689583938195533744925444882057707475386473247015995367586890455404484205676160611863275388358726028845704781555758343921452271928793482099470840420073490826924979479639087192136391156648112559957108353914056497079887866726787263171111589146366068059370316968843806867990622242057379438419156616642915534177563843458932555039086239559535436110929852759007724569959231165527821978919270083624060157087485633123042047809328417220245359185316557015783671173322247439858067635325458986458254576241109387126248222069789858210804719591777560093
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							22b88485c8a35d66a997241da0a01305cc447278
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2619 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-28-s12.tlsprovisioning.exacttarget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.action.team-fca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.admissions.ahduni.edu.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.best.agencyofincome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.can.greenworkstools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.cloud.uniminuto.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.com.utk.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.connect.senecazoo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.contacto.clubsolaris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.crm.infracommerce.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.divulga.sebrae-pe.net.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.brightcove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.mufgamericas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.nymg.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.premiermartialarts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.em.peoplesbanknet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.anantara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.avanihotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.bluepassport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.collinsaerospace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.convr.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.eztec.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.ijm.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.kellerpostman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.naladhu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.nhcollection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.nhhotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.nhowhotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.niyama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.nswrl.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.oakshotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.ou.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.resmed.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.starparks.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.steinerstudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.tivolihotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email110grill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.emailapexentertainment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.emailevvivatrattoria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.emailkrbrestaurant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.emailwjflorida.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.f4.jibunbank.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.financialwellness.pwc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.hall.mileone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.hg.mileone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.income.permanentvictory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.cidadesol.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.fandisentinel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.telmac.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.information.unitingworld.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.intake.mtlawoffice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.internal.mileone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.join.asuprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.leooo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.lovivimosjuntos.cusezar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.allspringglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.cajarealdelpotosi.coop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.centrecultureludes.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.inc-aus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.isaac.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.jobomas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.lgonline.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail09.bell.bank'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mailers.happiesthealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.grupo-sm.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.signatureglobal.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketingnaskadigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.messages.verisign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.messages.wmich.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mission.uncommonschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mkt.chicagobearsvip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mkt.dfwairport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mkt.hirogin.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mkt.manairadigital.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.motorworld.mileone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.myfssmailusaf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.tudoep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.newsletters.happiesthealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.notificaciones.tuya.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.relacionamento.univali.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.remodelacionesusg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.rockportkr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sales.brokermarketing.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sales.catalystfc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sf.talentsprint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.solutions.canadapost-postescanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.thombrowneclient.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.travel.redcoachusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.us.greenworkstools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.uscommercial.greenworkstools.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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